Remote Clinic vulnerabilities
4 known vulnerabilities in Remote Clinic from RemoteClinic. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
RemoteClinic: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in RemoteClinic up to 2.0. Impacted is an unknown function of the file /staff/edit-my-profile.php. The manipulation of the argument image results in unrestricted upload. The attack may be launched remotely. The exploit has been made p
- 9.8 Critical severity
RemoteClinic: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Performing manipulation of the argument image results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and
- 8.8 High severity
remote_clinic: Unrestricted Upload of File with Dangerous Type
RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabil
- 9.8 Critical severity
Remote Clinic: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.